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DATA RETENTION OF INTEGRATED CIRCUIT ON RECORD CARRIER 

BACKGROUND OF THE INVENTION 

Field Of The Invention 

[0001] The invention relates to a record carrier comprising an 
information area for storing information, and further relates to an 
integrated circuit comprising a storage unit for storing additional 
information. The invention also relates to a method of restoring 
the additional information. The invention also relates to an 
apparatus and to an integrated circuit. 

Mscrj,pti.on....Of ...The...Relat 

[0002] A record carrier of the type described in the opening 
paragraph is known, inter alia, from patent International Patent 
aB^3rjbeafe^^ft-Appli cation No. WO 02/1731 6, corre spondinq to U.S. 
Patent Application Publication No. US2002/00249G5 -f^^-- (Attorney 
Docket No. PHNL010233) . This patent application discloses an 
integrated circuit present on a record carrier comprising a light- 
sensitive sensor. The integrated circuit can be powered via this 
sensor . 

[0003] Recently, it has been proposed to equip optical record 
carriers, such as, for example, CD-ROM discs or DVD-Video discs, 
with an integrated circuit. The integrated circuit can be used for 
storing all kinds of information, for example information related 
to the actual content stored on the record carrier, but also access 
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information. This access information may comprise keys for 
encrypting and decrypting the stored information or Digital Rights 
Management (DRM) information, i.e.^^ information for controlling the 
type of access to the information, like read-only, copy-only-once , 
etc. Use of an integrated circuit on a record carrier appears to be 
a robust method of copy protection, because the information present 
in the integrated circuit is secret and cannot be easily accessed. 
[0004] As the integrated circuit present on such a record 
carrier must be able to retain and/or store information, it 
comprises a storage unit, besides in addition to m eans for 
receiving and transmitting information. This storage unit may be 
magnetically readable and/or programmable. An example of a 
magnetically readable storage unit is a hard disc. This storage 
unit may also be electrically readable and/or programmable. 
Examples are non-volatile memories^ such as EEPROM, Flash, MRAM or 
FERAM. All of these memories are rewritable multiple times. 
Detailed information on these so-called non-volatile memories can 
be found in "Non-volatile semiconductor memories, technologies, 
design, and applications", Chenming HU (ed. ) , 1991, ISBN 0-87942- 
269-6. 

[0005] In general, most storage units suffer from data 
degradation and/or data loss. Associated with this is the term 
"data retention time" . The ^data retention time^ is the time for 
which the reliability and/or correctness of data stored in the 
storage unit is guaranteed. For a non-volatile memory such as an 
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EEPROM (an electrically erasable programmable read-only memory that 
is inexpensive and needs no backup battery) , the data retention 
time is specified for approximately 10 years. The data retention 
time for an EEPROM is not indefinite as, over time, charge tends to 
leak from the floating gates of some of the memory devices of the 
EEPROM. Over time, this leakage can lead to incorrect information 
or to a complete loss of information. 

[0006] The invontors A pplicants have realized that it is 
desirable to prevent this loss of information. If this information 
is degenerated or lost, it is possible that the information stored 
in the record carrier cannot can no longer be accesse d anymoro . 
This holds, for example, if the information is key information or 
DRM information. It is important to avert this, as it would lead to 
unjustly restricting the usage rights of the user or buyer of the 
record carrier concerned. 

SUMMARY OF THE INVENTION 
[0007] It is an object of the invention to realize a record 
carrier comprising an integrated circuit, for which the loss of 
information stored in the integrated circuit, due to natural 
deterioration of the memory type used or due to any other cause, 
can be overcome. It is a further object to realize a method of 
restoring the additional information. It is a further object to 
realize an apparatus for performing the method. It is a further 
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object to realize an integrated circuit for use in the record 
carrier. 

[0008] According to the invention, the integrated circuit 

present on the record carrier further comprises a one-time 
programmable memory comprising a resurrection ke y for use in 
restoring the additional information , the one-time programmable 
memory having a substantially larger data retention time than the 
storage unit. By equipping the integrated circuit with a one-time 
programmable memory having a substantially larger data retention 
time than the storage unit and by storing a resurrection key in 
this memory, it becomes possible to restore lost or deteriorated 
additional information, because the resurrection key can be used 
for recovering the additional information stored in the storage 
unit. The record carrier according to the invention thus has the 
advantage that the information stored remains usable, even after 
the additional information stored in the storage unit has been 
degenerated or is lost. 

[0009] The invention is based on the following recognition. 
Nowadays, most record carriers available have such a high quality 
with regard to durability that, if such record carriers are 
equipped with storage units having a limited data retention time, 
it is not just imaginary that the information stored on such a 
record carrier "survives" this storage unit, i.e.^ the additional 
information present in the storage unit is lost or is degenerated 
before the value of the information stored on the record carrier is 
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lost. The data retention time of a non-volatile memory like an 
EEPROM is specified for approximately 10 years. For a record 
carrier with an integrated circuit comprising such an EEPROM, this 
implies that the integrity of the keys and the updatable rights 
stored in the EEPROM are not guaranteed after that time. The 
inventors have recognized that this effect is detrimental to the 
use of such record carriers. 

[0010] In an advantageous embodiment of the record carrier 
according to the invention, the one-time programmable memory 
further comprises information related to the expiration date of the 
information stored or to be stored in the information area. This 
has the advantage that this information allows a more accurate 
determination of the way in which the additional information is 
lost or has been degenerated. 

[0011] In a further advantageous embodiment of the record 
carrier according to the invention, the record carrier further 
comprises a disc key. The resurrection key is preferably encrypted 
with the disc key. The expiration date is preferably encrypted with 
the disc key. Using the disc key, the resurrection key and the 
expiration date can be protected against illegal access, as only 
compliant players are intended to be able to read out this key. 
[0012] In a further advantageous embodiment of the record 
carrier according to the invention, the disc key is a unique disc 
key that is derived from an identifier of the integrated circuit. 
The one-time programmable memory preferably further comprises the 
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identifier. By deriving the disc key also from an identifier of the 
integrated circuit, for example a unique number stored in the 
integrated circuit, it is possible to strengthen the copy 
protection or information access system. The identifier can already 
be stored in the integrated circuit during production of the 
circuit, which makes changing or removing the identifier be - eeme - s 
almost impossible. 

[0013] In a further advantageous embodiment of the record 
carrier according to the invention, the one-time programmable 
memory is realized in fuse-logic. A fuse-logic one-time 
programmable memory has the advantage that it has an almost 

indefinite retention time. 

[0014] In a further advantageous embodiment of the record 
carrier according to the invention, the storage unit is an EEPROM 

having a data retention time of approximately 10 years. This record 
carrier according to the invention has the advantage that the 
storage unit used on the integrated circuit present on the record 
carrier can be made thinner, as the thickness of the isolator layer 
in the storage unit, for example^, a silicon-oxide layer, can be 
decreased. Although this will increase the chance that the 
electrons trapped in the floating gate of the EEPROM cell will flow 
away and will thus decrease the data retention time of the memory, 
the information lost can be restored by using the resurrection key. 
This record carrier_i_ according to the invent ion_i_ thus has the 
further advantage that storage units with a decreased retention 



PHNL020629-SS-RED-121808.doc 6 



PHNL 020629 



time can be used. These kinds of storage units can generally be 
produced faster and cheaper than storage units with a larger 
retention time. For example, the so-called Mifare Ultra Light 
EEPROM is produced by skipping certain steps in the IC process and 
by not performing extensive testing. 

[0015] In a further advantageous embodiment of the record 
carrier according to the invention, the integrated circuit is 
contactlessly readable. 

[0016] The invention further relates to a method of restoring 
the additional information stored in the storage unit present on 
the integrated circuit of the record carrier according to the 
invention. The invention further relates to an apparatus for 
performing the method according to the invention. The invention 
further relates to an integrated circuit for use in the record 
carrier according to the invention. 

BRIEF DESCRIPTION OF THE DRAWINGS 
[0017] These and other aspects of the invention are apparent 
from and will be elucidated with reference to the embodiments 
described hereinafter, and with reference to the accompanying 
drawings, in which: 

[0018] Fig. 1 shows^ diagrammatical ly^ an embodiment of the 

record carrier according to the invention; 

[0019] Fig. 2 shows the use of the embodiment of the record 
carrier according to the invention as shown in Fig. 1; 



PHNL020629-SS-RED-121808.doc 7 



PHNL 020629 



[0020] Fig. 3 shows a first embodiment of the method of 
restoring the additional information present on the integrated 
circuit of the record carrier according to the invention; 
[0021] Fig. 4 shows a flow— chart accompanying this first 
embodiment ; 

[0022] Fig. 5 shows a second embodiment of the method of 
restoring the additional information present on the integrated 
circuit of the record carrier according to the invention; 
[0023] Fig. 6 shows a third embodiment of the method of 
restoring the additional information present on the integrated 
circuit of the record carrier according to the invention; and 
[0024] Fig. 7 shows a fourth embodiment of the method of 
restoring the additional information present on the integrated 
circuit of the record carrier according to the invention. 
[0025] Corresponding elements in the different Figures have 
identical reference numerals. 

DESCRIPTION OF THE PREFERRED EMBODIMENTS 
[0026] Fig. 1 shows^ diagrammatical ly^. an embodiment of the 
record carrier according to the invention. A record carrier 1, for 
example^, a CD-Audio disc, has an information area 2 for storing 
information, and an integrated circuit 3 . It is schematically 
indicated that the integrated circuit 3 has a storage unit 4 for 
storing additional information, such as, for example, an Asset Key 
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(A^) or Asset Keys (A^s) and Rights information, and a one-time 
programmable (OTP) memory 5. 

[0027] An Asset Key is a key that is used for encrypting a 
certain asset with, for example^ a certain track of a CD-Audio 
disc. Each track of this disc may have its own Asset Key. However, 
an Asset Key can also be used for encrypting a number of tracks or 
for encrypting the complete contents of the disc. When these Asset 
Keys are used for controlling access to the information stored on a 
record carrier, they must be encrypted in order to prevent illegal 
access to the information. To this end, they can be encrypted with 
a disc key (see Figs. 3,_4 and 5 and the accompanying description 
for an example of such a disc key) . 

[0028] Rights information is so-called Digital Rights Management 
(DRM) information, information related to the way in which the 
information stored in the information area, the actual data, is 
allowed to be used. This DRM information is known to the skilled 
person, and may, for example, indicate the number of times the 
information may be copied or played back. This DRM information is 
updatable, for example, when the information is copied one time, 
the DRM information indicating the number of times the information 
may be copied must be amended in that it is decreased by one. 
[0029] The storage unit circuit may be, for example, an EEPROM 
or flash EEPROM. An EEPROM is an electrically erasable programmable 
read-only memory, which is erasable byte by byte, in contrast to a 
flash EEPROM, which is an EEPROM that cannot be erased by bytes but 
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can be erased by the entire chip or large sections thereof. 
Detailed information on EEPROM and flash EEPROM can be found in the 
article "Non-volatile semiconductor memories, technologies, design, 
and applications", mentioned hereinbefore. 

[0030] The memory arrays of these memories are constructed of a 
large plurality of floating-gate metal-oxide-silicon field effect 
transistor devices arranged as memory cells in typical row and 
column fashion with circuitry for accessing individual cells and 
placing the memory transistors of these cells in different memory 
conditions. Such memory transistors may be programmed by storing a 
charge on the floating gate. This charge remains when power is 
removed from the array. The charge level may be detected by 
interrogating the devices. EEPROM devices in memory arrays can 
store one (single-bit cell) or more (multi-bit cell) bits per 
device. Over time, charge tends to leak from the floating gates of 
some of the memory devices. This may result in an incorrect value. 
The chance of this incorrectness is even increased if a number of 
different charge levels is stored in one device because the 
differences between charge levels which indicate the different data 
values stored by the cell are much smaller when a number of levels 
is stored. 

[0031] An OTP memory is a memory with a large retention time, at 
least large compared to the retention time of the storage unit 
which is also present on the integrated circuit. In an OTP memory, 
data can only be stored once. OTPs may be, for example, EPROMs 
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without the UV transparent windows in the packages, which can then 
also be called PROMs . Detailed information on OTP memories can be 
found in "A new programmable cell utilizing insulator breakdown", 
Sato, Nawata, Wada, lEDM Tech. Dig., pp. 639-643, 1985 (Paper 2.7 
of "Non-volatile semiconductor memories, technologies, design, and 
applications"). Also A lternatively, a fuse-logic OTP memory can be 
used. Programming such a memory requires the removal of significant 
amounts of materials by evaporation. 

[0032] In this OTP memory 5, a Unique Chip Identifier (IDuc) , a 
resurrection key and the expiration date Dexp of the information 
stored or to be stored in the information area 2 is stored. A 
Unique Chip Identifier is a unique number associated with the 
integrated circuit present on the record carrier, which cannot 
normally be amended or deleted and can be used for identification 
purposes, but also in copy protection or access protection schemes. 
This Unique Chip Identifier can be stored "in the clear" and is 
then accessible without the knowledge of encryption keys or the 
like. 

[0033] As stated before, tl^jrs — the resurrection key Rj^ is used to 
restore the lost or deteriorated additional information of the 
storage unit 4. In a preferred embodiment, the expiration date D^xp 
is also used in the restoration of this additional information. The 

operation of R^ and D^xp will be elucidated in embodiments of the 
method according to the invention, which are described below. 
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[0034] In this embodiment of the record carrier according to the 
invention, the information stored in the information area 2 of the 
record carrier 1 is encrypted with Asset Key Aj^ stored in the 
storage unit 4 of the integrated circuit 3 . It should be noted that 
the terms encryption and decryption of information are also 
understood to mean scrambling and descrambling . In fact, it is 
evident to those skilled in the art that there is no fundamental 
difference between scrambling/descrambling and 
encrypting/decrypting information. 

[0035] Fig. 2 shows the use of the record carrier of Fig. 1. In 
Fig. 2, the record carrier 1 of Fig. 1 is read out by a player 6. 

This player may be any kind of player for playing record carriers, 
such as, for example, the well-known CD-Audio player or the DVD- 
Video player. The operation and functioning of such players is 
known to the person skilled in the art. Compared to the known 
players, this player 6 is modified in that it comprises a security 
module 7, which is capable of reading out the information present 
in the storage unit 4 and the information present in the OTP memory 
5. 

[0036] Using the additional information, A^ / A^s/ Rights, 
present in the storage unit 4, the data stored in the information 
area 2 of the record carrier 1 is protected against illegal use. 
The data, E^^^^^DATA), is encrypted with Asset Key Aj^. The security 
module 7 reads out the Asset Key A^ from the storage unit on the 
integrated circuit and sends this key to the decryption module 8 in 
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which the encrypted data E^^^Cdata) is decrypted to result data 
which can be further processed in side or outside the player 6 . 
[0037] If the additional information cannot be reliably read out 
by the security module 7, the restoration key can be used for 
restoring this additional information. This can be accomplished, 
for example, by connecting to the Internet via a so-called Secure 
Authenticated Channel (SAC) 9. This can also be accomplished by 
connecting to a content provider. This can also be performed in a 
shop in which the additional information is restored using the 
restoration key Rr. If the integrated circuit is capable of 
producing sufficient processing power, additional security can be 
achieved by applying a so-called Secure Authenticated Channel (SAC) 
10 between the integrated circuit 3 and the security module 7 in 
the player 6. This will be further explained with reference to Fig. 
6. 

[0038] Different embodiments of the use of the record carrier of 
Fig. 1 as shown in Fig. 2 will now be discussed and explained with 

reference to Figs. 3 to 6 . In every embodiment shown in these 
Figures, the resurrection key Rj^ is used for restoring the Asset 
Keys and the Rights via the Internet, a content provider or any 
other possible trusted third party. This resurrection key R^ may 
comprise a unique number which can be used by a Trusted Third Party 
(TTP) when reading out the additional information and/or checking 
the integrity of this additional information. It is also possible 
that the resurrection key Rk comprises an encryption/decryption 
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key, a certificate or any other information that can be used by the 
TTP. 

[0039] Fig. 3 shows a first embodiment of the method of 

restoring the additional information present on the integrated 
circuit of the record carrier according to the invention. Fig. 4 
shows a flow—chart accompanying this embodiment. In this 
embodiment, the storage unit present on the integrated circuit 3 is 
a non-volatile memory, in particular an EEPROM 4. In this 
embodiment, the additional information stored in the EEPROM has 
been lost and this information is restored via a provider. 
[0040] The Asset Keys and the Rights are encrypted in an 
encrypter El by a disc key CID_key. The encrypted Asset Keys and 
Rights, EciD_key(^K' Rights), are stored in the EEPROM 4. The 
CID_key is derived by hashing , in a hasher H, the Unique Chip 
Identifier IDuc with a Hidden Channel Key HC_key. However, it is 
also possible that the CID_key is derived by decrypting the IDyc 
(when IDuc is encrypted with the HC_key) with the HC_key or that 
the CID_key is derived by decrypting the HC_key IDuc (when HC_key 
is encrypted with the IDuc) with the IDuc- contrast to IDuc/ 
this Hidden Channel Key is not allowed to be present in the clear, 
but can only be read out by a compliant player 6. This Hidden 
Channel Key may be, for example, the Hidden Channel Key as 
described in International Patent Application No. WO02 715185^ 
corresponding to U.S. Patent 7,038,600 -(- ^(Attorney Docket No. 
PHNL000451) . The Resurrection Key Rr is also encrvpte d, in 
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encrvpter E2 , with the CID_keY^ and the Resurrection Key thus 
encrypted, EcjD_]^ey(RK) , is stored in OTP memory 5, preferably in 
fuse-logic. As mentioned before, this type of memory has a much 

longer retention time as compared to EEPROM. 

[0041] Information stored or to be stored in the storage unit 4 
and the OTP memory 5 can be transferred between the player 6 and 
the integrated circuit 3 in different ways. In this embodiment, the 
data transfer from the security module in the player to the 
integrated circuit is effected via an optical link (opt) , for 
example, comprising a LED/photodiode, and the data transfer from 
the integrated circuit to the security module in the player is 
effected via a radio frequency link (rf ) , for example, a radio 
transmitter/receiver combination. Information on these links can be 
found in the above-cited WO 02/17316 (= PHNL010233), which is 
herein incorporated by reference. 

[0042] The content of the EEPROM 4 is analyzed in the security 
module 7. This will be explained with reference to Fig. 4. First, 

the EEPROM data, the additional information^ is read from the 
EEPROM in step 11. In step 12, the security module 7 checks whether 
the EEPROM data, A^, Rights, has been degenerated. If the EEPROM 
data has not been lost or degenerated, the EEPROM data (including 
the Asset Key A y is decrypted in decrypter D with the CID key, and 
the information of the disc is read out by decrypting the E^^^^^^^ta) 
in decryption module 8 with the read out decrypted Asset Key A^ in 
step 13. If the EEPROM data has been lost or degenerated, the 
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security module 7 checks whether the EEPROM data, A^, Rights, has 
been degenerated "naturally", in step 14. There are different ways 
to check whether the data has been degenerated naturally. For 
example, it is possible to detect the number of errors in a certain 
block and calculate the error rate. If this number exceeds a 
certain predefined number, it can be decided that the degeneration 
has not been the result of natural degeneration. International 
Patent application A pplication No. W O96/20443 , corresponding to 
U.S. Patent 5,475,693, describes different embodiments of 
performing such a check. It is also possible to check whether the 
number of errors in the data exceeds the error correction capacity 
of the data. It can be decided that, if this is the case, the 
degeneration is not due to natural degeneration. 

[0043] In a preferred embodiment of this natural degeneration 

check, the OTP memory also comprises information related to the 
expiration date D^xp of the information stored or to be stored in 
the information area. Using this expiration date, it is possible to 
perform a more accurate detection of the way of degeneration of the 
EEPROM data. It is important to distinguish between natural and 
non-natural degeneration, because non-natural degeneration can be 
the result of attempts to illegally get access to the information 
stored in the information area of the record carrier by trying to 
delete the EEPROM data. By checking specific tamper profiles, the 
security module 7 can detect non-natural degeneration (fraud) and 
block access to the information forever. 
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[0044] In a preferred embodiment, the degeneration of the EEPROM 
data is detected in the integrated circuit 3 itself by checking the 
pattern of 'natural' data degeneration. This has the advantage that 
information relating to the checking of the pattern of a 
degeneration does not have to be outsourced to the security module 
7 of the player 6. This will reduce the possibilities of 
"eavesdropping" on this information. Furthermore, as the check is 
performed in the integrated circuit itself, external signals are 
hampered from influencing this check. To be able to perform this 
check in the integrated circuit, the integrated circuit must be 
able to produce sufficient processing power. 

[0045] If it is detected in step 14 that the errors in the data 
or the loss of the data has been the result of natural 
degeneration, the resurrection key combined with the disc key 
CID_key can be used to restore the keys and the rights, for 
example, via the Internet or via a provider of a trusted party 
("shop") by using a SAC, step 15. In a preferred embodiment, the 
availability of Asset Key A^ and the rights supplied by the content 
provider should be coupled to the expected EEPROM expiration date 
D^xp- This has the advantage that replay attacks are prevented. If 
it is detected in step 14 that the errors in the data or the loss 
of the data has not been the result of natural degeneration, 
decrypting of the information present on the disc is prevented, in 
step 16. 
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[0046] Fig. 5 shows a second embodiment of the method of 
restoring the additional information present on the integrated 
circuit of the record carrier according to the invention. In this 
embodiment, the Rights are made ever ever -- lasting via the provider 
after the expiration date has passed, despite the condition of the 
EEPROM data. This embodiment is based on the understanding that the 
actuality or lifetime information stored in the information area of 
the record carrier is limited. As an example, a software release is 
substituted by new updates and certain music is not popular anymore 
after a certain time. The rights management architecture checks if 
the disc content has been expired. After expiration, the copy 
protection mechanism is bypassed by getting everlasting, or amended 
rights from the provider. Passing the expiration date will trigger 
the connection to the provider via, for example, the Internet. In a 
variant of this embodiment, the expiration date D^xp of the 
information is stored in OTP memory in the integrated circuit. 
Instead of storing the expiration date, it is also possible to use 
the production date of the record carrier. A certain predefined 
time after the production date, the Rights can then be made 
everlasting or can be amended. It is also possible to use multiple 
dates to allow a gradual amendment of the Rights, for example, 
after the first date the Rights have been amended to copy-one, and 
after the second date the Rights have been amended to unlimited 
rights. It is also possible to use the expiration date or dates for 
restricting the use after a certain time, for example, in the case 
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of a record carrier comprising a demo of a certain software 
program . 

[0047] Fig. 6 shows a third embodiment of the method of 

restoring the additional information present on the integrated 
circuit of the record carrier according to the invention. This 
embodiment differs from the second embodiment in that the Rights 
are amended or made everlasting after the expiration date without 
the intervention of or connection to the provider. In the player 6, 
it is checked whether the disc content has expired. This is 
performed by comparing the actual date D;^cT with the expiration 
date Dgxp- If the actual date D^^^fp is after the expiration date 
^EXP' the additional information is amended in that 'ever-lasting 
rights' are stored in the storage unit 4. In order to increase 
security, the comparison whether the actual date D;^cT is after the 
expiration date D^xp can also be performed inside the security 
module 7 . 

[0048] Fig. 7 shows a fourth embodiment of the method of 

restoring the additional information present on the integrated 
circuit of the record carrier according to the invention. This 
embodiment differs from the third embodiment in that the transfer 
of data between the integrated circuit 3 and the security module 7 
of the player 6 takes places via a Secure Authenticated Channel 
(SAC) 10. Such a SAC may be based on, for example, public key 
cryptography. By implementing a SAC between the security module 7 
and the integrated circuit 3, possible attacks on the channel 



PHNL020629-SS-RED-121808.doc 19 



PHNL 020629 



between the security module and the integrated circuit can be 
blocked. An additional feature of a SAC protocol is that illegally 
produced or cloned discs can be revoked in a thorough way. In the 
SAC protocol, certificates can be distributed by a Trusted Third 
Party (TTP) that identifies uniquely every disc or group of discs. 
The SAC protocol checks by means of the IDuc whether the disc is 
illegal or not. As a result, all cloned discs and their original 
one(s) can be revoked. The revocation list ("black-list") can be 
distributed via legal discs to the player/ recorder module or 
through (super) distribution or whenever rights are attained. The 
EEPROM 4 may further comprise keys relevant to the set-up of the 
SAC. To be able to revoke a disc, the player 6 verifies whether the 
IDuc is present on the revocation list. The asset keys and the 
rights will be communicated via the SAC to the security module. In 
the same way as in the third embodiment, the player 6 checks 
whether the disc content has expired by comparing the actual date 
DacT with the expiration date Dexp- If the actual date D;^cT is 
after the expiration date D^xp/ the additional information is 
amended in that 'ever-lasting rights' are stored in the storage 
unit 4 . 

[0049] The claimed invention claim e d is not limited to a 
particular kind of record carrier comprising an integrated circuit. 
All kinds of record carriers can be used, such as, for example, a 
CD-ROM disc, a DVD-Video disc, a DVD+RW disc a Blu-Ray disc, or a 
Mini Disc, but also non-optical record carriers, such as, for 
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example, a hard disc or a magnet ical tape. The invention is neither 
limited to a particular kind of connection method between the 
integrated circuit and the security module present in the player 
(or recorder) . Although an optical/radio frequency connection 
method is used in the embodiments (in which an optical connection 
is used for communication from the security module in the player to 
the integrated circuit, and in which a RF connection is used for 
communication from the integrated circuit to the security module in 
the player) , it is, for example, also possible to use an inductive 
coupling method using, for example, the well-known MIFARE 
contactless interface system (standardized in ISO/IEC 14443 for 
contactless cards) . It is also possible to use a capacitive 
coupling, for example, the capacitive coupling already mentioned 
and described in patent International Patent application 
Application NO. WO 02/25582.. corresponding t o U.S. Patent 6.986.151 
■{■-■■■■ ( A 1 1 o r ne V Do c ke t No . PHNL 000525) , which is herein incorporated 
by reference. It is further possible to use RF coupling for both 
connections (integrated circuit towards security module and 
security module to integrated circuit) , for example using the so- 
called Meu chip, developed by Hitachi. The invention is not limited 
to a particular kind of storage unit or to a particular kind of OTP 
memory . 

[0050] It should further be noted that use of the verb 
"comprise" and its conjugations in this specification, including 
the claims, is understood to specify the presence of stated 
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features, integers, steps or components, but does not exclude the 
presence or addition of one or more other features, integers, 
steps, components or groups thereof. It should also be noted that 
the indefinite article "a" or "an" preceding an element in a claim 
does not exclude the presence of a plurality of such elements. 
Moreover, any reference sign does not limit the scope of the 
claims; the invention can be implemented by means of both hardware 
and software, and several "means" may be represented by the same 
item of hardware. Furthermore, the invention resides in each and 
every novel feature or combination of features. 
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ABSTRACT- f OF THE DISCLOSURE 

T - he ----- i - nven - fc - i - en ----- re - l - a - t - es ---- record carrier 1 eemp ^ r - i - s - i - n g 

includes an information area 2 for storing information, and an 
integrated circuit 3 comprising having a storage unit 4 for storing 
additional information , e.g.. Asset Key A^; and Rights. The 
integrated circuit further comprises includes a one-time 
programmable memory 5 comprising containing a resurrection key R^, 
the one-time programmable memory having a substantially larger data 
retention time than the storage unit. If the additional information 
present in the storage unit is lost or has degenerated, it is 
possible to restore this information by using the resurrection key 
present in the one-time programmable memory. 
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